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controls may be exported in accordance with United States export laws, and/or imported into 
other countries that place additional restrictions on the use of cryptography. — 



^ J Replace the paragraph beginning at page 1 , line 1 2, with the following rewritten"! 

^^Lparagraph: 



-- BACKGROUND 



/ ^ Replace the paragraph beginning at page 1, lines 13-30, with the following rewritten^ 
~2 /paragraph: 

*J3 -- There are many circumstances where the distribution or the use of encryption 

fu 

software is regulated by the government. In some countries, the strength of encryption that can 
be exported is regulated without any restrictions on States, companies are free to distribute any 
type of encryption software developed within the country for use by Unites States citizens. 
□ Furthermore, the United States allows unrestricted importation of encryption technology. 
^ However, exporting a certain strength encryption from the United States is regulated. In other 

W countries, such as France, the strength of encryption that can be used, distributed, or imported is 

O 

tightly regulated. 

In the case where exportation of encryption software is restricted, permissible 
exportable encryption software are usually limited to specific algorithms that use key sizes which 
are weaker than a particular size. Previously, encryption software has generally been an integral 
part of a software application. Therefore, to accommodate the varying degrees of permitted 
encryption levels, several versions of the same application are typically created; one version that 
provides strong encryption by those who are allowed unrestricted use, and one or more versions 
that use weaker encryption for those customers whose use is restricted. - 



Replape-tfie paragraph beginning at page 4, line 22, with the following rewritten 
paragraph: 

-SUMMARY- 
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Replaoelfieparagraph beginning at page 6, line 1, with the following rewritten 
paragraph: 




-DESCRIPTION OF THE DRAWINGS-- 



I Replace the paragraph beginning at page 6, lines 2-3, with the following rewritten 

(jjaragraph: 



-Figure 1 illustrates a block diagram of a system including a policy filter in 
^ accordance with an embodiment of the present invention.- 

gj I ~~ Replace the paragraph beginning at page 6, lines 4-5, with the following rewritten^ 
H (e^ragraph: 



Ol -Figure 2 illustrates a flow chart of the initialization of the policy filter in 

H; accordance with an embodiment of the present invention.— 



5 E 



r-^^Replace the paragraph beginning at page 6, lines 6-7, with the following rewritten^ 
(paragraph: 

-Figure 3 illustrates a flow chart of the control of capability query through the 
policy filter in accordance with yet another embodiment of the present invention.-- 

r-^"^ Replace the paragraph beginning at page 6, lines 8-9, with the following rewritten| 
Lparagraph: ^ 



-Figure 4 illustrates the control of cryptographic operation through the policy 
filter in accordance with an embodiment of the present invention.- 




m 
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Replace the paragraph beginning at page 6, lines 10-11, with the following rewritten 
paragraph: 



—Figure 5 illustrates a flow chart of a cryptographic policy module using a 
ff^ cryptographic policy file in accordance with an embodiment of the present invention.- 

r~^~^ Replace the paragraph beginning at page 6, lines 12-13, with the following rewritten I 
(paragraph: 

--Figure 6 illustrates a block diagram of a system including a policy file and 
module in accordance with an embodiment of the present invention.-- 



Replace the paragraph beginning at page 6, line 15, with the following rewritten^ 
paragraph: 




-DETAILED DESCRIPTION- 




tten 



Replace the paragraph beginning at page 6, lines 16-17, with the following rewritten 
?aragraph: 



--Figure 1 illustrates a block diagram of a system including policy filters in 
accordance with an embodiment of the present invention.- 



Rep^ethe paragraph beginning at page 15, lines 26-29, with the following rewritten 
paragraph: 

-Although the invention has been described in connection with specific 
embodiments, it should be understood that the invention as claimed should not be unduly limited 
to such specific embodiments.-- 



